Data breaches · News & analysis
Quest Restores Quanum as Patient-Data Investigation Continues
The laboratory company reports restored access while the affected-patient and information scope remains unresolved.
NEWS · ALERTS · RESEARCH
Healthcare
Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
Original reporting & analysis
Security technology · News & analysis
NIST’s Privacy Cryptography Workshop Puts Deployment Questions on the Agenda
An October 26–28 virtual workshop will examine privacy-enhancing cryptography, giving technology teams a chance to frame concrete evaluation questions.
Ransomware · News & analysis
Ransomware Investigations Trace a Route From VPN Access to Virtual Servers
Unit 42’s October update makes virtualization management a necessary part of investigating affected GlobalProtect gateways.
Data breaches · News & analysis
Pediatric Data-Breach Settlement Puts Security Vendor Responsibilities in Focus
New York and Connecticut announced a settlement involving Boston Children’s Health Physicians and its IT services provider.
Policy & compliance · News & analysis
Britain’s AI Near-Miss Plans Put Incident Records on the Business Agenda
The government is exploring reporting and response measures for autonomous AI risks; businesses can prepare evidence without assuming new rules are already in force.
Ransomware · News & analysis
Ransomware Response Plans Face a Human Test as Staff Threats Escalate
Semperis’s new victim survey highlights intimidation, putting employee support and escalation procedures alongside technical recovery.
Ransomware · News & analysis
Record Ransomware Claims Demand Careful Reading—and a Recovery Test
Comparitech’s third-quarter report separates confirmed incidents from unverified claims, a distinction that matters when businesses turn threat statistics into spending decisions.
Data breaches · News & analysis
Advantest’s October Notice Confirms Personal Data Was Taken in February
A newly issued notification separates the earlier intrusion from the personal-data consequences now being communicated to recipients.
Policy & compliance · News & analysis
Europol’s Quantum Warning Starts With the Data Businesses Keep
Two new reports call for phased preparation while distinguishing future cryptographic risk from demonstrated attacks today.
Cybercrime & fraud · News & analysis
KillSec Seizure Creates a New Evidence Trail for Extortion Victims
Hamburg police report arrests and seized infrastructure, while affected businesses still need to preserve their own incident records.
Industry & business · News & analysis
SGS Takes Majority Stake in Prescient Security as Cyber Assurance Expands
The completed transaction brings cybersecurity assessment and compliance services into a larger testing and certification group, putting service continuity on buyers’ agenda.
Policy & compliance · News & analysis
October Brings a Budget Decision for Businesses Still Using SMS Authentication
Microsoft’s published transition schedule puts telecom-provider selection later this month, giving businesses a reason to review exceptions and support costs now.
Security technology · News & analysis
Zimbra Research Shows Why Mail-Server Recovery Must Include Authentication Secrets
Microsoft’s new investigation connects a mail-server flaw with persistent access and credential collection, extending the response beyond an update.
Vulnerabilities & patches · News & analysis
Citrix NetScaler Exploitation Raises an Urgent Patching—and Evidence—Decision
CISA warns of active exploitation as administrators weigh emergency updates, service continuity and the need to preserve signs of compromise.
AI security · News & analysis
NCSC Warns That Autonomous Defense Must Account for Business Disruption
A new assessment puts operational consequences alongside speed when deciding which security actions AI should perform.
Industry & business · News & analysis
Barracuda Targets the Small-Business AI Security Gap
An upcoming AI governance product puts a familiar buying question in focus: can a lean IT team prove its controls work in everyday use?
Ransomware · News & analysis
The Ransomware Name Changes. The Intrusion Pattern May Not.
New research on Storm-2570 makes the case for investigating the behavior leading up to encryption, rather than waiting for a familiar ransom note.
Headlines from our sources
28 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
Help Net Security
Breach victims discover their data was held by companies they’ve never heard of ↗
Industry newsDataBreaches.net
IN: 9 servers of Bajaj Hospital hacked in cyberattack at 3 am, sensitive data stolen; systems encrypted ↗
Industry newsDataBreaches.net
Cyberattack forces University of New Mexico Health to divert ambulances, cancel appointments ↗
Industry newsDataBreaches.net
Conduent to pay $80M to settle 3rd-largest healthcare data breach ↗
Industry newsInfosecurity Magazine
Cyber Incident Forces UNM Health to Cancel Surgeries, Divert Ambulances ↗
Industry newsThe Record
University of New Mexico hospital diverts ambulances after cyberattack ↗
Industry newsSecurityWeek
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk ↗
Industry newsHelp Net Security
Cyberattack disrupts University of New Mexico hospitals, extortion group claims attack ↗
Industry newsHelp Net Security
71% of vulnerability exploitation starts within a week of disclosure ↗
Industry newsSecurityWeek
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics ↗
Industry newsSecurityWeek
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ ↗
Industry newsThe Hacker News
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion ↗
Industry newsHelp Net Security
Privacy-preserving AI can protect your heart data, the bill is the problem ↗
Industry newsDataBreaches.net
Suspected cyber incident blocks Parkview Health patient portal in Indiana and Ohio ↗
Industry newsSecurityWeek
970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach ↗
Industry newsHelp Net Security
Your frontline workers have a workaround for that MFA prompt ↗
Industry newsDataBreaches.net
More NHS staff sacked for accessing records of Nottingham stabbing victims ↗
Industry newsDataBreaches.net
NY AG James and CT AG Tong Secure $2.7 Million from Boston Children’s Health Physicians and XTIUM for 2024 Data Breach ↗
Industry newsDataBreaches.net
Russian man linked to deadly NHS contractor hack arrested ↗
Industry newsDataBreaches.net
Attackers claim to have stolen 80 million South African patient records in massive Ampath Laboratories data breach (Disputed) ↗
Industry newsDataBreaches.net
UK: Commercial market research and data-gathering firm in the medical space leaked health data ↗
Industry newsDataBreaches.net
Australian patient data compromised in Icon Cancer Centre hack ↗
Industry newsSOCRadar
Angi Data Sale, The Tour Guy Breach, Healthcare Leads, KPN Leak, and CafeMom Data Resurface ↗
ResearchDark Reading
Critical Healthcare Systems Aren't Quantum-Ready ↗
Industry newsInfosecurity Magazine
Critical Medical Devices Unable to Support PQC Transition ↗
Industry newsWIRED Security
An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later ↗
Industry newsHuntress
Hackers Frequently Target Healthcare and Finance Orgs ↗
ResearchESET WeLiveSecurity